CVE-2025-32364

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-32364
A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an application to crash when handling malformed inputs associated with INT_MIN.

4.0 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.5 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://gitlab.freedesktop.org/poppler/poppler/-/commit/d87bc726c7cc98f8c26b60ece5f20236e9de1bc3 Patch
https://gitlab.freedesktop.org/poppler/poppler/-/issues/1574 Exploit Issue Tracking
Configurations

Configuration 1 (hide)

cpe:2.3:a:freedesktop:poppler:*:*:*:*:*:*:*:*
History

09 Oct 2025, 14:00

Type Values Removed Values Added
CPE cpe:2.3:a:freedesktop:poppler:*:*:*:*:*:*:*:*
References () https://gitlab.freedesktop.org/poppler/poppler/-/commit/d87bc726c7cc98f8c26b60ece5f20236e9de1bc3 - () https://gitlab.freedesktop.org/poppler/poppler/-/commit/d87bc726c7cc98f8c26b60ece5f20236e9de1bc3 - Patch
References () https://gitlab.freedesktop.org/poppler/poppler/-/issues/1574 - () https://gitlab.freedesktop.org/poppler/poppler/-/issues/1574 - Exploit, Issue Tracking
First Time Freedesktop poppler
Freedesktop

07 Apr 2025, 14:17

Type Values Removed Values Added
Summary
  • (es) Una excepción de punto flotante en la función PSStack::roll de Poppler anterior a 25.04.0 puede provocar que una aplicación se bloquee al manejar entradas malformadas asociadas con INT_MIN.

05 Apr 2025, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-05 22:15

Updated : 2025-10-09 14:00

NVD link : CVE-2025-32364

Mitre link : CVE-2025-32364

CVE.ORG link : CVE-2025-32364

JSON object : View

Products Affected

freedesktop

  • poppler
CWE
CWE-190

Integer Overflow or Wraparound